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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 

application: 

LISTING OF CLAIMS: 

1-26. (canceled). 

27. (currently amended): An information storage management system in a first 
administrative domain administered by a first organization, comprising: 

a collection of stored objects in the first administrative domain administered by the first 
organization ; 

an access control unit in the first administrative domain administered by the first 
organization for determining if a requestor is authorized to access a protected object stored in the 
collection in the first administrative domain administered by the first organization ; 

a resource manager connected to the access control unit and to a communications 
channel; 

wherein the resource manager receives a user's request for access to the protected object 
in the first administrative domain administered bv the first organization , the request including a 
globally unique identifier for the user requesting the access, and in response to the user's request, 
the resource manager sends over the communications channel to an external storage management 
system in a second administrative domain administered by a second organization that is different 
from the first organization, a resource manager request for information about the user, the 
resource manager request including the globally unique identifier; and 
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wherein the resource manager upon receiving a response to the resource manager request 
from the external storage management system passes the user information to the access control 
unit in the first administrative domain administered by the first organization : and 

wherein responsive to the user information the access control unit determines whether to 
authorize the user for access to the protected object. 

28. (original): The information storage management system of claim 27, wherein the 
globally unique identifier is a Universal Unique Identifier (UUID). 

29. (original): The information storage management system of claim 27, wherein the 
user information is organization information indicating whether the user is a member of an 
organization. 

30. (previously presented): An information storage management system in a first 
administrative domain administered by a first organization, comprising: 

a collection of stored objects in the first administrative domain administered by the first 
organization : 

an access control unit in the first administrative domain administered by the first 
organization for determining if a requestor is authorized to access a protected object stored in the 
collectio n in the first administrative domain administered by the first organization ; 

a resource manager connected to the access control unit and to a communications 
channel; 
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wherein the resource manager receives a user's request for access to the protected object 
in the first administrative domain administered by the first organization , the request including a 
globally unique identifier for the user requesting the access, and in response to the user's request 
the resource manager resolves the globally unique identifier to a user identifier recognized by an 
external storage management system in a second administrative domain administered by a 
second organization that is different from the first organization,£[;]l the resource manager 
sending to the external storage management system a resource manager request for information 
about the user, the resource manager request including the resolved user identifier; and 

wherein the resource manager upon receiving a response to the resource manager request 
from the external storage management system passes the user information to the access control 
unit in the first administrative domain administered bv the first organization: and 

wherein responsive to the user information the access control unit determines whether to 
authorize the user for access to the protected object. 

31. (original): The information storage management system of claim 30, wherein the 
globally unique identifier is a Universal Unique Identifier (UUID). 

32. (original): The information storage management system of claim 30, wherein the 
user information is organization information indicating whether the user is a member of an 
organization. 

33. (original): The information storage management system of claim 30, wherein the 
resource manager resolves the globally unique identifier by using a name server. 



4 



AMENDMENT UNDER 37 C.F.R. § 1.1 1 1 Attorney Docket No.: A7254 
U.S. Application No.: 09/465,514 



34-46. (canceled). 
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